laminas / laminas-diagnostics

A set of components for performing diagnostic tests in PHP applications
https://docs.laminas.dev/laminas-diagnostics/
BSD 3-Clause "New" or "Revised" License
55 stars 32 forks source link

Update dependency enlightn/security-checker to v2 #77

Open renovate[bot] opened 10 months ago

renovate[bot] commented 10 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
enlightn/security-checker ^1.10 -> ^1.10 \|\| ^2.0 age adoption passing confidence

Release Notes

enlightn/security-checker (enlightn/security-checker) ### [`v2.0.0`](https://togithub.com/enlightn/security-checker/releases/tag/v2.0.0) [Compare Source](https://togithub.com/enlightn/security-checker/compare/v1.11.0...v2.0.0) ##### Added - Fix Symfony missing int return type ([#​35](https://togithub.com/enlightn/security-checker/pull/35)) ### [`v1.11.0`](https://togithub.com/enlightn/security-checker/releases/tag/v1.11.0) [Compare Source](https://togithub.com/enlightn/security-checker/compare/v1.10.0...v1.11.0) ##### Added - Support Symfony 7 ([#​32](https://togithub.com/enlightn/security-checker/pull/32))

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



Read more information about the use of Renovate Bot within Laminas.

renovate[bot] commented 10 months ago

âš  Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

â™» Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: composer.lock
Command failed: composer update enlightn/security-checker:2.0.0 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins
Loading composer repositories with package information
Dependency symfony/yaml is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency guzzlehttp/guzzle is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires enlightn/security-checker ^1.10 || ^2.0 -> satisfiable by enlightn/security-checker[v2.0.0].
    - enlightn/security-checker v2.0.0 requires php >=8.2 -> your php version (8.1.99; overridden via config.platform, actual: 8.1.26) does not satisfy that requirement.
Xerkus commented 10 months ago

2.0.0 is not installed in CI due to requirement for symfony/console 7 which is not installed due to psalm Blocked by #62

gjuric commented 7 months ago

Could this be merged without waiting for #62 to be closed? The only difference between those two versions is adding return types to a SecurityCheck command (see https://github.com/enlightn/security-checker/compare/v1.11.0...v2.0.0 ).

There has been no activity on #62 for more than a year.